CVE-2026-101083

MediumCVSS 5.3

Published: 28/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

22th percentile - higher than 22% of all known CVEs

Summary

A vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. An unknown function in the encryptionhelper.dll library leads to information disclosure. The attack may be launched remotely. The vendor did not respond.

Risk Assessment

A remote attack can lead to disclosure of sensitive information, potentially compromising data confidentiality.

Recommendation

Restrict access to PMWeb and monitor for unauthorized activity, and contact the vendor for a fix.

Other vulnerabilities in PMWeb

CVE-2026-101082Medium
A weakness has been identified in PMWeb 7.x/8.x/2025.x. Unknown processing in downloader.aspx with the FullFileName/FileName argument causes path traversal. The attack may be initiated remotely. The exploit is publicly available. The vendor did not respond.

Original NVD description (English source)

A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS